Controlling access to variables protected by an alias during a debugging session
View Patent ↗According to embodiments of the invention, methods, computer readable storage medium, and a computer system for controlling access to variables protected by an alias are disclosed. The method may include monitoring, during a debug session, each attempt by a debugger to apply an operator to one or more variables protected by an alias. The method may also include determining whether to allow an application of an operator to a variable protected by an alias, wherein the determination is based at least in part on one or more rules.
1. A method of controlling access to variables by a debugger during a debug session, the method comprising:
monitoring, during the debug session, attempts by the debugger to access a variable, an alias masking confidential information contained in the variable;
identifying, during the debug session, an attempt for an access of the variable, the access of the variable applying an operator to the variable;
identifying a rule associated with the variable, the rule associating accesses that apply the operator with a threshold;
determining that an access count is below the threshold, the access count of the accesses that apply the operator to the variable;
incrementing the access count based on the allowing the access of the variable;
allowing the access of the variable based on the rule;
identifying, during the debug session, an attempt for a second access of the variable, the second access of the variable applying the operator to the variable;
determining that the access count is not below the threshold; and
disallowing the second access of the variable based on the rule.
2. The method of claim 1 , wherein the operator is selected from the group consisting of:
a mathematical operator;
an array operator; and
a Boolean operator.
3. The method of claim 1 , further comprising:
identifying, during the debug session, an attempt for a second access of the variable, the second access of the variable applying a second operator to the variable;
identifying a second rule associated with the variable, the second rule disallowing accesses that apply the second operator; and
disallowing the second access of the variable based on the second rule.
4. The method of claim 1 , further comprising:
monitoring, during the debug session, attempts by the debugger to access a second variable, a second alias masking confidential information contained in the second variable;
identifying, during the debug session, an attempt for an access of the second variable, the access of the second variable applying the operator to the second variable;
identifying a second rule associated with the second variable, the second rule controlling accesses that apply the operator; and
disallowing the access of the second variable based on the second rule.
5. A non-transitory computer readable storage medium for controlling access to variables by a debugger during a debug session, the medium having instructions stored thereon which, when executed, cause a processor to perform a method comprising:
monitoring, during the debug session, attempts by the debugger to access a variable, an alias masking confidential information contained in the variable;
identifying, during the debug session, an attempt for an access of the variable, the access of the variable applying an operator to the variable;
identifying a rule associated with the variable, the rule associating accesses that apply the operator with a threshold;
determining that an access count is below the threshold, the access count of the accesses that apply the operator to the variable;
incrementing the access count based on the allowing the access of the variable;
allowing the access of the variable based on the rule;
identifying, during the debug session, an attempt for a second access of the variable, the second access of the variable applying the operator to the variable;
determining that the access count is not below the threshold; and
disallowing the second access of the variable based on the rule.
6. The storage medium of claim 5 , wherein the operator is selected from the group consisting of:
a mathematical operator;
an array operator; and
a Boolean operator.
7. The storage medium of claim 5 , wherein the method further comprises:
identifying, during the debug session, an attempt for a second access of the variable, the second access of the variable applying a second operator to the variable;
identifying a second rule associated with the variable, the second rule disallowing accesses that apply the second operator; and
disallowing the second access of the variable based on the second rule.
8. The storage medium of claim 5 , wherein the method further comprises:
monitoring, during the debug session, attempts by the debugger to access a second variable, a second alias masking confidential information contained in the second variable;
identifying, during the debug session, an attempt for an access of the second variable, the access of the second variable applying the operator to the second variable;
identifying a second rule associated with the second variable, the second rule controlling accesses that apply the operator; and
disallowing the access of the second variable based on the second rule.
9. A computer system for controlling access to variables by a debugger during a debug session, the computer system including a processor and a memory encoded with instructions, wherein the instructions when executed on the processor perform a method comprising:
monitoring, during the debug session, attempts by the debugger to access a variable, an alias masking confidential information contained in the variable;
identifying, during the debug session, an attempt for an access of the variable, the access of the variable applying an operator to the variable;
identifying a rule associated with the variable, the rule associating accesses that apply the operator with a threshold;
determining that an access count is below the threshold, the access count of the accesses that apply the operator to the variable;
incrementing the access count based on the allowing the access of the variable;
allowing the access of the variable based on the rule;
identifying, during the debug session, an attempt for a second access of the variable, the second access of the variable applying the operator to the variable;
determining that the access count is not below the threshold; and
disallowing the second access of the variable based on the rule.
10. The computer system of claim 9 , wherein the operator is selected from the group consisting of:
a mathematical operator;
an array operator; and
a Boolean operator.
11. The computer system of claim 9 , wherein the method further comprises:
identifying, during the debug session, an attempt for a second access of the variable, the second access of the variable applying a second operator to the variable;
identifying a second rule associated with the variable, the second rule disallowing accesses that apply the second operator; and
disallowing the second access of the variable based on the second rule.
12. The computer system of claim 9 , wherein the method further comprises:
monitoring, during the debug session, attempts by the debugger to access a second variable, a second alias masking confidential information contained in the second variable;
identifying, during the debug session, an attempt for an access of the second variable, the access of the second variable applying the operator to the second variable;
identifying a second rule associated with the second variable, the second rule controlling accesses that apply the operator; and
disallowing the access of the second variable based on the second rule.